CVE-2026-44757 is a cross-site scripting vulnerability in SAP Wily Introscope Enterprise Manager. An unauthenticated attacker can create a specially crafted URL which, when visited by a user, causes script execution in the user's browser under the application's context. This improper neutralization of input during web page generation (CWE-79) can lead to limited confidentiality and integrity impacts. The CVSS 3.1 base score is 4.7 (medium severity) with network attack vector, high attack complexity, no privileges required, user interaction required, and scope changed. No official remediation or patch information is currently available.

The vulnerability allows execution of attacker-controlled scripts in the victim's browser within the application context, potentially leading to limited disclosure or modification of information (confidentiality and integrity impact are low). There is no impact on system availability. The attack requires user interaction (clicking the malicious URL) and has high attack complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when clicking on URLs related to the affected application. No official remediation or temporary fixes have been provided at this time.